Given that the judiciary has seen fit to relieve the TSA of the burdensome requirement of actually publishing their requirements in the federal register (due to the overriding interest of security), it is highly unlikely that they will put a leash on them because they are requiring ID.

It is however plausible that if enough folks complain then congress will rope them in.

There is another reason that the TSA won't do it: No one at that agency wants to be on the hook for removing a security requirement, due to the small possibility that the removal would be somehow exploited as part of successful attack and blame would fall back on them.

Hence there are some burdensome things that the TSA is very reluctant to implement as it will be hard/risky to reverse the decision later. They could allow congress to force their hand (which allows them to point the finger if and when they need to) but that makes for friction with congress, which is also a bad idea.